Soohos' run through is pretty good...

https://nakedsecurity.sophos.com/2021/12/13/log4shell-explai...